$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft File: 1A5D93C2B21C390D054872B547EF671BC1112ED5.mft (raw, json) Hash identifier: VYrmr/lMx1H/MLVQicny27eNJ0p4kXFTs7zVsaB9qGE= Subject key identifier: 11:21:D0:79:15:67:AD:8A:C8:D8:4A:6A:41:F4:BC:E4:0E:84:09:A7 Authority key identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 Certificate issuer: /CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Certificate serial: 4C0FCC00EFCF47C0F9E717A1FB8B9C33298D5238 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft Manifest number: 99 Signing time: Wed 13 May 2026 11:01:03 +0000 Manifest this update: Wed 13 May 2026 10:56:03 +0000 Manifest next update: Thu 14 May 2026 12:31:03 +0000 Files and hashes: 1: 3130332e34372e38302e302f32322d3232203d3e20313334373635.roa (hash: kU8ZpTrXY6JeDmKQWJ4S005IDbAoloAT2cFKH9NDoa4=) 2: 3130332e32332e382e302f32322d3232203d3e20313334373635.roa (hash: ln972wvrzSBEORo9DPPeJbIXLsmgp1iIG1BgLmdr5+g=) 3: 1A5D93C2B21C390D054872B547EF671BC1112ED5.crl (hash: whYSFU3YdHWOp37W/8RElZlGLiaGCDUWwyKWwvIwjQg=) 4: 34332e3235342e3235322e302f32322d3232203d3e20313334373635.roa (hash: YBGoT8mUzeyt/JC8Sh5jlyNBlqC5ecvmhtvHHC0j9gM=) 5: 3130332e3230332e3134302e302f32322d3232203d3e20313334373635.roa (hash: ZjwDDfmeHi1TdKdCeuuvzyOYx2ipxq03Vh0SPR2jC34=) 6: 34332e3232382e37362e302f32322d3232203d3e20313334373635.roa (hash: 0QQ3acV5OGPw111O9u72jjimK1i0jbUIJPcTkw6FNnE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:0f:cc:00:ef:cf:47:c0:f9:e7:17:a1:fb:8b:9c:33:29:8d:52:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Validity Not Before: May 13 10:56:03 2026 GMT Not After : May 14 12:31:03 2026 GMT Subject: CN=1121D0791567AD8AC8D84A6A41F4BCE40E8409A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ad:ef:0c:e0:65:78:f9:af:c0:89:bd:65:f0: 1c:fa:16:df:c4:4b:7a:b5:cf:25:2d:78:b7:48:fb: d8:ac:b5:c9:85:a9:bf:f2:1b:8a:5a:68:20:62:e2: e2:ad:74:a0:d0:94:40:5e:32:bf:ec:c2:b4:6e:e5: 46:4f:b7:ae:7c:d4:d0:1e:21:09:e9:8c:9b:29:db: 68:51:9e:da:d0:ff:11:9d:74:a3:0a:d5:04:47:5a: 1a:82:6e:a3:48:28:a3:ad:93:61:3d:1f:ae:47:dc: a2:70:55:b9:68:4c:a1:93:9b:de:fc:5d:38:eb:41: b2:50:87:62:21:a5:16:28:05:8e:ef:27:8b:da:ad: 28:4b:21:9a:4c:a5:a6:6f:c5:bb:de:6a:0f:b9:94: 6f:79:1d:6c:2e:71:98:8b:1c:bd:87:9f:d1:18:57: 45:2e:90:10:9d:ad:dc:5b:70:8c:f8:53:a2:ee:58: 9a:25:02:b1:5d:5a:35:16:be:42:85:72:b0:6f:87: ff:11:52:3a:26:63:71:1c:bc:8c:ff:4d:fe:b6:98: f2:0c:d7:07:a1:bf:21:c4:d1:54:b9:2c:2d:98:92: 58:b0:7c:e5:09:96:45:07:a6:81:15:13:6b:96:18: c9:ee:10:19:06:fb:f0:6c:9b:cf:00:55:32:56:14: 48:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:21:D0:79:15:67:AD:8A:C8:D8:4A:6A:41:F4:BC:E4:0E:84:09:A7 X509v3 Authority Key Identifier: keyid:1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:48:bc:4c:04:52:4c:47:05:11:e3:3b:e5:7d:db:60:cd:51: d1:61:59:f2:f5:0b:48:a2:3f:d9:2f:5c:1a:b4:dd:6a:f3:bc: 55:b4:07:b2:a7:3f:c7:48:23:17:19:01:e2:20:48:29:32:1a: 5a:50:8f:63:9f:bb:3f:fb:fa:55:b8:d9:ab:51:f4:77:c3:81: aa:22:1c:bb:b3:6b:66:28:e4:25:bc:4e:4c:35:ec:3d:46:74: 3d:b6:9c:59:ef:df:45:e7:16:73:06:87:41:74:fd:06:db:f4: eb:36:e4:0f:1a:3a:cc:46:93:e8:7c:a2:e2:99:99:1f:dd:72: 09:33:d0:c8:3c:74:a2:ff:f9:7a:93:c5:10:92:34:c4:67:22: 74:60:bf:48:8a:b6:98:9c:51:b2:50:fe:af:be:81:26:e2:e8: 1c:8f:d4:eb:df:1d:8a:c1:02:9e:08:97:45:3e:28:62:47:fd: 0c:50:da:02:25:be:ef:6a:d4:1a:73:f2:21:d8:59:39:c2:38: 6d:52:67:8e:8c:38:c0:89:b3:d9:a8:80:a7:55:8b:74:af:35: f6:bd:b0:00:4d:7c:f0:4c:fa:75:ff:ae:57:60:50:31:09:db: d0:dd:5d:e5:45:28:cc:a1:f3:31:5a:60:8a:f6:ec:24:27:4b: 31:bc:c5:69 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTA/MAO/PR8D55xeh+4ucMymNUjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJD MTExMkVENTAeFw0yNjA1MTMxMDU2MDNaFw0yNjA1MTQxMjMxMDNaMDMxMTAvBgNV BAMTKDExMjFEMDc5MTU2N0FEOEFDOEQ4NEE2QTQxRjRCQ0U0MEU4NDA5QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4re8M4GV4+a/Aib1l8Bz6Ft/E S3q1zyUteLdI+9istcmFqb/yG4paaCBi4uKtdKDQlEBeMr/swrRu5UZPt6581NAe IQnpjJsp22hRntrQ/xGddKMK1QRHWhqCbqNIKKOtk2E9H65H3KJwVbloTKGTm978 XTjrQbJQh2IhpRYoBY7vJ4varShLIZpMpaZvxbveag+5lG95HWwucZiLHL2Hn9EY V0UukBCdrdxbcIz4U6LuWJolArFdWjUWvkKFcrBvh/8RUjomY3EcvIz/Tf62mPIM 1wehvyHE0VS5LC2YkliwfOUJlkUHpoEVE2uWGMnuEBkG+/Bsm88AVTJWFEhnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUESHQeRVnrYrI2EpqQfS85A6ECacwHwYDVR0j BBgwFoAUGl2TwrIcOQ0FSHK1R+9nG8ERLtUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODM1MzUzOC8wLzFBNUQ5M0MyQjIxQzM5MEQwNTQ4NzJCNTQ3RUY2 NzFCQzExMTJFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJDMTExMkVENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgzNTM1MzgvMC8xQTVEOTNDMkIyMUMz OTBEMDU0ODcyQjU0N0VGNjcxQkMxMTEyRUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEi8TARSTEcF EeM75X3bYM1R0WFZ8vULSKI/2S9cGrTdavO8VbQHsqc/x0gjFxkB4iBIKTIaWlCP Y5+7P/v6VbjZq1H0d8OBqiIcu7NrZijkJbxOTDXsPUZ0PbacWe/fRecWcwaHQXT9 Btv06zbkDxo6zEaT6Hyi4pmZH91yCTPQyDx0ov/5epPFEJI0xGcidGC/SIq2mJxR slD+r76BJuLoHI/U698disECngiXRT4oYkf9DFDaAiW+72rUGnPyIdhZOcI4bVJn jow4wImz2aiAp1WLdK819r2wAE188Ez6df+uV2BQMQnb0N1d5UUozKHzMVpgivbs JCdLMbzFaQ== -----END CERTIFICATE-----Generated at Wed May 13 20:58:14 2026 by rpki-client